How to Recover Files Using Volume Shadow Copies?

Hello, I accidentally lost all of my files due to ransomware attack. The malicious virus encrypted all of my files and I can no longer open them. I heard that Windows computers provide Volume Shadow Copy service that allows recovering previous versions of data, but I am not sure how to use this service. Can you provide a tutorial on how to recover encrypted files using Volume Shadow Copies?

Reimage is recommended to recover required system components. To get a detailed report and in-depth analysis about your system, use the free scanner.
To recover needed system components, please, purchase the licensed version of ReimageReimage recovery tool.

Volume Shadow Copy is a technology presented by Microsoft Windows, and it allows creating automatic or manual data backups every once in a while. This feature takes snapshots of current state of files and saves them (even the files are in use). Shadow copies can be formed on local or external volumes.

These copies usually come in handy when the user unexpectedly loses or corrupts some data stored on its computer. This feature is extremely useful when dealing with a ransomware attack – it can help to restore damaged files with ease in case the victim has no physical backup stored on an external data storage device such as DVD or USB. This feature doesn’t only help to restore files corrupted by ransomware, but also allows recovering a previously saved game point, accidentally overwritten file, and so on. The guide given below explains how to recover files and folders using Volume Shadow Copies.

Easy Ways to Recover Files Using Volume Shadow Copies

Reimage is recommended to recover required system components. To get a detailed report and in-depth analysis about your system, use the free scanner.
To recover needed system components, please, purchase the licensed version of Reimage Reimage recovery tool.

Recover overwritten or encrypted files using Volume Shadow Copies

First of all, go to the folder that contains the file that you want to restore.Locate the file that you want to recover and right-click it. Choose Properties and then go to Previous Versions tab.In the list of available options, find the preferable variant of the file that you want to restore. Use “Date Modified” section for guidance. Once you decide which version you’d prefer to recover, click on it and select either Copy… or Restore… option. The first option allows copying the desired file version to a specified location, and the second option just overwrites the existing file copy.TIP: We recommend choosing the Copy… option because once you overwrite an existing file copy, the change cannot be undone.

Recover a deleted file

Find the folder that stored the file that was deleted.

Right-click on the folder and select Restore Previous Versions.

Find the file that you want to recover, select it and hit Restore…

Click OK and then OK again.

Recover a deleted folder

Right-click on a blank space in the folder that has to be recovered. Go to Properties > Previous Versions.

Select the preferred version of folder and click Copy… or Restore… We suggest choosing the Copy… option as this way you can test if the selected version is the one that you need.

Shadow Explorer is an excellent tool that is meant to identify and restore files using Volume Shadow Copies automatically. You can download ShadowExplorer here.

Install the program by following steps provided by Shadow Explorer Setup Wizard.

Launch the program and then choose the location that contained the file/folder that you want to recover.

Choose the preferred date when the Shadow Volume Copies were created, and then find the folder/file you want to recover.

Right-click it and select Export… Again, choose the location to transfer the file to and click OK.

Recover files and other system components automatically

To recover your files and other system components, you can use free guides by ugetfix.com experts. However, if you feel that you are not experienced enough to implement the whole recovery process yourself, we recommend using recovery solutions listed below. We have tested each of these programs and their effectiveness for you, so all you need to do is to let these tools do all the work.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided software you agree to our privacy policy and agreement of use.

Do you have any trouble?If you are having problems related to Reimage, you can reach our tech experts to ask them for help. The more details you provide, the better solution they will provide you.

Reimage - a patented specialized Windows repair program. It will diagnose your damaged PC. It will scan all System Files, DLLs and Registry Keys that have been damaged by security threats.Reimage - a patented specialized Mac OS X repair program. It will diagnose your damaged computer. It will scan all System Files and Registry Keys that have been damaged by security threats.This patented repair process uses a database of 25 million components that can replace any damaged or missing file on user's computer.To repair damaged system, you have to purchase the licensed version of Reimage malware removal tool.

About the author

Olivia Morelli
- PC & Mac repair expert

Olivia Morelli is a young, but a perspicacious IT expert who is currently just a year away from a Bachelor’s Degree in Software Systems. Her primary passion is cyber security, however, thanks to her detailed understanding of computer networks, operating systems and hardware, she can find a fix for any PC or Mac issue...